[Secure-testing-commits] r40710 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Sat Apr 2 09:12:22 UTC 2016


Author: carnil
Date: 2016-04-02 09:12:22 +0000 (Sat, 02 Apr 2016)
New Revision: 40710

Modified:
   data/CVE/list
Log:
Add bug references for squid3 issues

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-04-02 08:45:16 UTC (rev 40709)
+++ data/CVE/list	2016-04-02 09:12:22 UTC (rev 40710)
@@ -1,13 +1,13 @@
-CVE-2016-3948
-	- squid3 <unfixed>
+CVE-2016-3948 [Denial of service]
+	- squid3 <unfixed> (bug #819784)
 	[jessie] - squid3 <no-dsa> (Minor issue; needs substantial backporting; too intrusive to backport)
 	[wheezy] - squid3 <no-dsa> (Minor issue; needs substantial backporting; too intrusive to backport)
 	- squid <undetermined>
 	NOTE: http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14016.patch
 	NOTE: http://www.squid-cache.org/Advisories/SQUID-2016_4.txt
 	TODO: check src:squid, possibly as wel not-affected since CVE-2016-2569 was as well
-CVE-2016-3947
-	- squid3 <unfixed>
+CVE-2016-3947 [buffer overrun in Squid proxy 'pinger']
+	- squid3 <unfixed> (bug #819783)
 	[jessie] - squid3 <no-dsa> (Minor issue)
 	[wheezy] - squid3 <no-dsa> (Minor issue)
 	- squid <removed>




More information about the Secure-testing-commits mailing list